Hybrid Join GPO

[Paulo Silva]

Hello friends,

I need a little help.

I would like to know exactly the difference between:

 Register domain joined computer as device

and

Enable automatic MDM enrollment using default Azure AD credentials

I can see some devices in my environment with windows 10 1709 version that not enroll device as hybrid. I already configured Enable automatic MDM enrollment using default Azure AD credentials and in my opinion that was enough to enroll devices as hybrid.

Am I doind something wrong or I really need both GPO's configured in my tenant ?

Thanks

[#2]

Register domain joined computer as device is used when you are controlling the rollout of Hybrid AD Join. Enable Automatic MDM Enrollment using default Azure AD Credentials is the GPO which will auto enrol the device into Intune (Providing it is Hybrid AD Joined)

[#3]

So if I already use one of them in my case automatic mdm enrollment, it's not necessary use both? is it ?